Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-31826 |
medium | 6.8 | 0.0020 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who u | |
CVE-2026-28804 |
medium | 6.9 | 0.0044 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attack | |
CVE-2026-28351 |
medium | 6.9 | 0.0048 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attack | |
CVE-2026-27888 |
medium | 6.6 | 0.0040 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who u | |
CVE-2026-27628 |
low | 1.2 | 0.0040 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who u | |
CVE-2026-27026 |
medium | 6.9 | 0.0019 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who u | |
CVE-2026-27025 |
medium | 6.9 | 0.0019 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who u | |
CVE-2026-27024 |
medium | 6.9 | 0.0019 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who u | |
CVE-2026-24688 |
medium | 5.1 | 0.0044 | 2026-11-02 | 2 PoC | pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite |
CVE-2026-22691 |
low | 2.7 | 0.0043 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has | |
CVE-2026-22690 |
low | 2.7 | 0.0043 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has | |
CVE-2025-62708 |
medium | 6.6 | 0.0044 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attack | |
CVE-2025-62707 |
medium | 6.6 | 0.0044 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attack | |
CVE-2025-55197 |
medium | 6.6 | 0.0051 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attack | |
CVE-2023-46250 |
medium | 5.5 | 0.0025 | 2026-11-02 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerabil | |
CVE-2023-36810 |
medium | 6.5 | 0.0063 | 2026-11-02 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transformi | |
CVE-2023-36807 |
medium | 6.5 | 0.0057 | 2026-11-02 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transformi | |
CVE-2023-36464 |
medium | 5.5 | 0.0035 | 2026-11-02 | pypdf is an open source, pure-python PDF library. In affected versions an attacker may cra | |
CVE-2026-94290 |
critical | 9.1 | 0.0050 | 2026-11-02 | SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to inst | |
CVE-2026-120501 |
medium | 6.9 | 0.0030 | 2026-11-02 | An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTab | |
CVE-2026-120500 |
medium | 5.3 | 0.0029 | 2026-11-02 | An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in Otterw | |
CVE-2026-16306 |
critical | 9.8 | 0.0067 | 2026-11-02 | Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. I | |
CVE-2026-93569 |
high | 8.2 | 0.0242 | 2026-11-02 | A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability i | |
CVE-2026-81665 |
high | 7.5 | 0.0042 | 2026-11-02 | A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message | |
CVE-2025-63387 |
medium | 4.3 | 0.1871 | 2026-11-02 | Dify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated | |
CVE-2026-109142 |
high | 8.4 | 0.0028 | 2026-11-02 | When a CA's parent lives on the same Krill server: instead of building and verifying a sig | |
CVE-2026-109141 |
high | 8.4 | 0.0028 | 2026-11-02 | The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full | |
CVE-2026-109140 |
high | 8.4 | 0.0031 | 2026-11-02 | The vulnerability is that Krill encrypts every login-session token with a nonce built from | |
CVE-2026-20755 |
medium | 5.4 | 0.0012 | 2026-11-02 | Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications | |
CVE-2026-115653 |
high | 7.0 | 0.0014 | 2026-11-02 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M | |
CVE-2026-114408 |
high | 8.7 | 0.0036 | 2026-11-02 | In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 p | |
CVE-2026-77881 |
medium | 6.8 | 0.0019 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.29 contains a blind SQL injection vulner | |
CVE-2026-77880 |
high | 8.5 | 0.0079 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vuln | |
CVE-2026-77879 |
high | 8.4 | 0.0022 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerabilit | |
CVE-2026-77878 |
high | 8.5 | 0.0085 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vuln | |
CVE-2026-77877 |
high | 8.5 | 0.0016 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.29 contains a missing authentication vul | |
CVE-2026-77876 |
high | 8.7 | 0.0225 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vuln | |
CVE-2026-115654 |
medium | 6.9 | 0.0013 | 2026-11-02 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-contro | |
CVE-2026-104080 |
high | 8.5 | 0.0120 | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vuln | |
CVE-2026-2102 |
medium | 6.1 | 0.0027 | 2026-11-02 | wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST | |
CVE-2026-118052 |
medium | 6.8 | 0.0011 | 2026-11-02 | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return | |
CVE-2026-20713 |
medium | 4.5 | 0.0010 | 2026-11-02 | Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) pr | |
CVE-2026-120492 |
medium | 6.3 | 0.0022 | 2026-11-02 | Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthent | |
CVE-2026-120491 |
medium | 5.1 | 0.0018 | 2026-11-02 | Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that all | |
CVE-2026-120489 |
medium | 5.3 | 0.0024 | 2026-11-02 | Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocume | |
CVE-2026-120488 |
medium | 5.1 | 0.0022 | 2026-11-02 | LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allow | |
CVE-2026-120487 |
high | 8.6 | 0.0048 | 2026-11-02 | LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPol | |
CVE-2026-120461 |
high | 8.7 | 0.0037 | 2026-11-02 | Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_com | |
CVE-2026-120460 |
high | 8.7 | 0.0037 | 2026-11-02 | Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that al | |
CVE-2026-120459 |
critical | 9.1 | 0.0025 | 2026-11-02 | python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unau |